General
- Target 2026-10-23_1ebee5da50a933189572bc4975b19f15_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample261023-rt8evsda86
- SHA256 bbe7f65d897e57923a68c28e803be1030819c65952b8d3f15f8b94a420e0c333
- MD5 1ebee5da50a933189572bc4975b19f15
- SHA1 2dd6828b8f141a43c887c07cd46ed0e30150ccb8
- SHA512 989fc278c46abb1a89b37774e75877e9e1d3000d3a9990fe436eb7dfa10b6341d90ebeebbd5c4db93049377575eb05d925c5d128255e2d4980ea17bbb3001b11
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:ISvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T132B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-23_1ebee5da50a933189572bc4975b19f15_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_1ebee5da50a933189572bc4975b19f15_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 bbe7f65d897e57923a68c28e803be1030819c65952b8d3f15f8b94a420e0c333
- MD5 1ebee5da50a933189572bc4975b19f15
- SHA1 2dd6828b8f141a43c887c07cd46ed0e30150ccb8
- SHA512 989fc278c46abb1a89b37774e75877e9e1d3000d3a9990fe436eb7dfa10b6341d90ebeebbd5c4db93049377575eb05d925c5d128255e2d4980ea17bbb3001b11
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:ISvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T132B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory